CWE-843: Type confusion
1,052 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 42 of them as exploited in the wild.
- Published CVEs
- 1,052
- Last 12 months
- 391
- Critical
- 115
- Known exploited
- 42
Critical 115High 697Medium 210Low 29Not scored 1
CVEs per yearBy the year they were published
- 20142
- 20168
- 201725
- 201858
- 201957
- 202070
- 202176
- 202255
- 202397
- 2024109
- 2025115
- 2026372
Known exploitedNewest addition to KEV first
- CVE-2026-85046
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…
Google · Chrome
ExploitedHigh8.8 - CVE-2026-21519
Desktop Window Manager Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedHigh7.8 - CVE-2025-13223
Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…
Google · Chrome
ExploitedHigh8.8 - CVE-2025-10585
Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.…
Google · Chrome
ExploitedHigh8.8 - CVE-2025-6554
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium…
Google · Chrome
ExploitedHigh8.1 - CVE-2025-30397
Scripting Engine Memory Corruption Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.5 - CVE-2024-7971
Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security…
Google · Chrome
ExploitedHigh8.8 - CVE-2024-38178
Scripting Engine Memory Corruption Vulnerability
Microsoft · Windows 11 Version 24H2
ExploitedHigh7.5 - CVE-2024-5274
Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.…
Google · Chrome
ExploitedHigh8.3 - CVE-2024-4947
Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.…
Google · Chrome
ExploitedCritical9.6
Newest CVEs
- CVE-2026-124031
GPAC through 26.07.0 Type Confusion via drawable_get_aspect_2d_mpeg4
gpac · gpac
Medium6.8 - CVE-2026-124030
GPAC through 26.07.0 Type Confusion via gf_sg_command_apply XMT Field-Replace
gpac · gpac
Medium6.8 - CVE-2026-116782
FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling
signalwire · freeswitch
High7.5 - CVE-2026-120646
CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic reference in uploadInfo
CGI
Not scored - CVE-2026-121218
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…
Google · Chrome
High8.8 - CVE-2026-121221
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…
Google · Chrome
High8.8 - CVE-2026-121078
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…
Google · Chrome
High8.8 - CVE-2026-121137
Type confusion in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the…
Google · Chrome
High8.8 - CVE-2026-121068
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.…
Google · Chrome
High8.8 - CVE-2026-121226
Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted…
Google · Chrome
High8.8